This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: b4i5xZubcb/EPmEerSmABSI+HA0Ojdp6Hy915uWAdwI= Subject key identifier: 46:9A:83:88:29:71:31:F6:62:DD:C4:4D:56:B4:C5:DB:26:EF:51:8D Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 71779532B0088451C476690D80DD6B880CC25BF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 0206 Signing time: Sun 25 Jan 2026 12:31:23 +0000 Manifest this update: Sun 25 Jan 2026 12:26:23 +0000 Manifest next update: Wed 28 Jan 2026 22:19:23 +0000 Files and hashes: 1: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: qZ1fFsApR2pj+Y+BWT347N5B+OUHk/mCLed+qELCggE=) 2: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 3: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 4: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 22:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:77:95:32:b0:08:84:51:c4:76:69:0d:80:dd:6b:88:0c:c2:5b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Jan 25 12:26:23 2026 GMT Not After : Jan 28 22:19:23 2026 GMT Subject: CN=469A8388297131F662DDC44D56B4C5DB26EF518D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:18:ed:74:50:1c:9d:dd:66:63:96:60:eb: 98:94:28:1f:60:93:1d:ab:7c:29:de:ff:f6:25:4c: 52:87:39:cd:0c:f7:30:33:ac:bd:11:38:88:30:76: cd:32:93:68:5a:88:6a:1a:b0:6c:87:50:0e:26:40: d8:03:8f:4f:0f:c3:6a:c6:f3:95:dd:4e:fa:7b:32: 84:84:f4:a2:18:2e:5c:9a:48:be:19:f2:55:3a:b9: 17:43:87:31:e3:3e:45:a9:d8:a1:42:85:20:70:95: ba:99:17:69:1d:15:d9:de:4a:b9:5b:52:75:12:bf: 9e:44:8a:5f:1a:98:63:1c:88:8b:8d:6f:b2:2e:a9: 95:0b:91:3b:23:1a:98:98:2e:e8:b4:e6:0b:a7:0c: 8d:46:1f:95:84:75:67:01:7f:f1:d7:0e:e3:63:c0: 66:bc:90:c6:cd:05:de:47:87:f1:4c:6a:63:aa:fb: fd:9c:c1:42:1d:77:15:6b:7f:a0:1a:95:43:25:19: 41:9d:c2:c9:31:fd:20:07:1c:05:34:00:a4:09:22: 8e:86:2d:05:4b:e9:37:84:a1:fd:aa:6e:b2:f1:d0: 15:25:e7:68:eb:74:00:4b:e5:2b:19:68:04:7e:50: c5:35:b1:84:1b:ab:f5:21:5f:81:dc:19:fa:36:a6: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9A:83:88:29:71:31:F6:62:DD:C4:4D:56:B4:C5:DB:26:EF:51:8D X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e4:74:e9:54:ac:d9:01:8c:eb:df:5a:f7:d4:1a:42:2d:c8: c5:ea:d6:a2:4b:c4:55:f0:84:c5:17:98:44:64:63:26:71:57: 62:24:5a:54:bb:4f:41:20:f5:f5:0f:86:25:41:23:81:da:74: 4c:50:c8:0f:b2:e5:a5:76:8b:ae:02:fa:27:24:9a:6f:e8:40: e6:f4:4f:6e:75:c4:13:29:4e:f9:22:b7:df:44:d7:76:2b:6e: 72:09:68:5d:3b:a7:a1:c9:47:b1:d9:9f:47:5b:1a:0d:11:c3: cd:1b:c7:c7:02:59:fb:5f:15:8d:1e:d5:3c:75:b4:21:cf:d0: c8:f2:24:d7:29:f8:17:3c:4c:52:81:e0:4e:11:75:dc:82:02: a8:36:78:e6:7a:61:ee:25:ae:18:b4:24:d9:bc:5e:77:13:94: 13:9b:13:62:89:12:94:76:6c:a4:c6:d5:d2:fd:d0:e2:e8:df: 0e:14:ae:14:13:15:6e:0e:96:e4:3a:11:21:37:fc:24:8b:ce: f0:a2:23:ad:bd:a3:1a:b4:04:da:fe:9a:df:63:52:8a:43:65: 59:6a:db:f5:43:5f:12:54:9a:80:2f:97:ba:e4:2d:39:85:73: 7e:54:db:98:35:e5:a6:d4:a8:b4:1b:d5:93:eb:90:1b:57:74: 33:7c:55:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXeVMrAIhFHEdmkNgN1riAzCW/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNjAxMjUxMjI2MjNaFw0yNjAxMjgyMjE5MjNaMDMxMTAvBgNV BAMTKDQ2OUE4Mzg4Mjk3MTMxRjY2MkREQzQ0RDU2QjRDNURCMjZFRjUxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBehjtdFAcnd1mY5Zg65iUKB9g kx2rfCne//YlTFKHOc0M9zAzrL0ROIgwds0yk2haiGoasGyHUA4mQNgDj08Pw2rG 85XdTvp7MoSE9KIYLlyaSL4Z8lU6uRdDhzHjPkWp2KFChSBwlbqZF2kdFdneSrlb UnUSv55Eil8amGMciIuNb7IuqZULkTsjGpiYLui05gunDI1GH5WEdWcBf/HXDuNj wGa8kMbNBd5Hh/FMamOq+/2cwUIddxVrf6AalUMlGUGdwskx/SAHHAU0AKQJIo6G LQVL6TeEof2qbrLx0BUl52jrdABL5SsZaAR+UMU1sYQbq/UhX4HcGfo2pmK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURpqDiClxMfZi3cRNVrTF2ybvUY0wHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDkdOlUrNkBjOvfWvfUGkItyMXq1qJLxFXw hMUXmERkYyZxV2IkWlS7T0Eg9fUPhiVBI4HadExQyA+y5aV2i64C+ickmm/oQOb0 T251xBMpTvkit99E13YrbnIJaF07p6HJR7HZn0dbGg0Rw80bx8cCWftfFY0e1Tx1 tCHP0MjyJNcp+Bc8TFKB4E4RddyCAqg2eOZ6Ye4lrhi0JNm8XncTlBObE2KJEpR2 bKTG1dL90OLo3w4UrhQTFW4OluQ6ESE3/CSLzvCiI629oxq0BNr+mt9jUopDZVlq 2/VDXxJUmoAvl7rkLTmFc35U25g15abUqLQb1ZPrkBtXdDN8VfE= -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:50 2026 by rpki-client